cbcvebase.
CVE-2012-6429
published 2014-04-04

CVE-2012-6429: Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute…

PriorityP259critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
15.47%
96.4th percentile
Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in Samsung Kies before 2.5.1.12123_2_7 allows remote attackers to execute arbitrary code via a long string to the password argument.

Affected

1 ranges
VendorProductVersion rangeFixed in
samsungkies<= 2.5.0.12114_1—

Detection & IOCsextracted from sources · hover to see the quote

commandTarget.PrepareSync arg1 ,arg2 ,arg3 ,arg4↗
filenameSyncService.dll↗
  • →Trigger is a call to the PrepareSync method of the SyncService.dll ActiveX control with an oversized password argument (14356 'A' characters in PoC) ↗
  • →Vulnerable component is the SyncService.dll ActiveX control; monitor for ActiveX instantiation of this control followed by PrepareSync invocations with abnormally long second arguments ↗
  • →Affected version is Samsung Kies 2.5.0.12114_1; versions before 2.5.1.12123_2_7 are vulnerable ↗
  • ·The PoC uses a fixed-size overflow buffer of 14356 bytes for the password argument; actual exploit offsets may vary by environment ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.